pha777 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") is issued by the operator of pha777 ("pha777," "we," "us," "our") and governs the collection, use, storage, sharing, and protection of personal data provided by users ("you," "Player," "Data Subject") when accessing or using the pha777 website, mobile applications, and related gaming services (collectively, the "Platform").

pha777 is committed to protecting the privacy of every Filipino player who registers and plays on our Platform. We operate as a Personal Information Controller (PIC) as defined under Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations ("IRR") as administered by the National Privacy Commission ("NPC"). All personal data processed by pha777 is handled in strict compliance with the DPA, applicable PAGCOR regulations, and Anti-Money Laundering (AML) obligations under Republic Act No. 9160, as amended.

This Policy applies to all personal data collected directly from you, automatically through your use of the Platform, or obtained from third-party sources in connection with your pha777 account. By registering an account or continuing to use pha777 services, you acknowledge that you have read, understood, and consent to the practices described in this Policy.

2. Data We Collect

2.1 Information You Provide Directly

When you register for an account, complete identity verification, make deposits, request withdrawals, or contact our support team, pha777 collects the following categories of personal data:

Category	Data Collected	Purpose
Identity Data	Full legal name, date of birth, nationality, government-issued ID number (passport, driver's license, UMID, SSS, PhilHealth)	Account registration, KYC verification, age confirmation
Contact Data	Philippine mobile number, email address, residential address (barangay, city, province, zip code)	Account communications, verification, withdrawal processing
Financial Data	GCash number, Maya account, bank account name and number, transaction history	Deposit processing, withdrawal, AML compliance
Verification Documents	Copies of government-issued IDs, selfie with ID, proof of address documents	KYC compliance per PAGCOR and AML requirements
Communications Data	Support chat logs, email correspondence, feedback submissions	Customer service, dispute resolution, service improvement

2.2 Data Collected Automatically

When you access and use the pha777 Platform, we automatically collect certain technical and behavioral data including but not limited to:

• Device Information: Device type, operating system, browser type and version, device identifiers, and screen resolution.
• Network Information: IP address, Internet Service Provider (ISP), approximate geographic location derived from IP, and connection type.
• Usage Data: Pages visited, games played, session duration, bet history, wagering patterns, login timestamps, and feature interactions.
• Cookie and Tracking Data: Session cookies, persistent cookies, pixel tags, and local storage data as further described in Section 6 of this Policy.

2.3 Data from Third Parties

pha777 may receive personal data about you from third-party sources in limited circumstances, including from payment service providers such as GCash and Maya for transaction verification purposes, from fraud prevention and identity verification agencies for KYC compliance, and from PAGCOR or other regulatory bodies in connection with licensing obligations. All such third-party data sharing is conducted under data sharing agreements compliant with the DPA.

3. How We Use Your Data

pha777 uses personal data collected from Filipino players for the following specific, legitimate purposes:

• Account Management: Creating, maintaining, verifying, and securing your pha777 account, including authentication and fraud prevention.
• Service Delivery: Processing deposits and withdrawals, facilitating gameplay, crediting bonuses, and delivering the full range of pha777 gaming services.
• Regulatory Compliance: Meeting obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), the DPA, and all other applicable Philippine laws and regulations.
• Identity Verification (KYC): Confirming your identity, age (21+), and the legitimacy of your payment methods as required by PAGCOR and AML regulations.
• Customer Support: Responding to your inquiries, resolving disputes, processing complaints, and improving our support services.
• Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, money laundering, and other prohibited activities.
• Responsible Gaming: Monitoring gameplay patterns to identify indicators of problem gambling and to administer self-exclusion and deposit limit tools where applicable.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.
• Platform Improvement: Analyzing aggregated usage data to improve game offerings, website performance, and the overall player experience.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, pha777 must have a lawful basis for processing your personal data. We rely on the following legal bases, depending on the specific processing activity:

1. Contractual Necessity: Processing required to fulfill our obligations under the pha777 Terms and Conditions, including account operation, payment processing, and service delivery.
2. Legal Obligation: Processing necessary to comply with applicable Philippine laws, including the DPA, AMLA, PAGCOR regulations, and Bureau of Internal Revenue (BIR) reporting requirements.
3. Legitimate Interests: Processing for fraud detection, platform security, responsible gaming monitoring, and internal analytics, where these interests do not override your fundamental rights.
4. Consent: Processing for marketing communications and non-essential cookies, where you have provided clear, freely given, and informed consent. Consent may be withdrawn at any time without affecting prior lawful processing.

5. Data Sharing & Disclosure

5.1 When We Share Your Data

pha777 does not sell, rent, or trade your personal data. We share personal information only in the following limited circumstances and only with parties bound by appropriate data protection agreements:

• Payment Processors: GCash, Maya, BPI, BDO, Metrobank, and other payment service providers receive necessary financial data solely to process transactions.
• Identity Verification Partners: Third-party KYC and AML screening providers receive identity documents and personal details solely for verification and compliance purposes.
• Game Studio Providers: Certified game providers may receive anonymized session data required for RNG certification and game performance auditing. No personally identifiable information is shared with game studios for marketing purposes.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies may receive data as required by law, court order, or regulatory directive.
• Technology & Infrastructure Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on our behalf under strict contractual data processing agreements aligned with the DPA.

5.2 Cross-Border Data Transfers

Some of pha777's technology partners and infrastructure providers may be located outside the Philippines. In such cases, we ensure that cross-border transfers comply with the NPC's requirements for international data transfers, including verification that the recipient jurisdiction provides adequate data protection levels or that appropriate contractual safeguards are in place.

6. Cookies & Tracking Technologies

6.1 Types of Cookies Used

pha777 uses cookies and similar tracking technologies on our Platform. These include:

• Strictly Necessary Cookies: Required for the Platform to function. These enable session management, authentication, and security features. You cannot opt out of these cookies without affecting Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game display options, and session configurations to personalize your experience.
• Analytics Cookies: Collect aggregated, anonymized data about how players navigate and use the Platform, used solely to improve performance and game selection.
• Security Cookies: Used for fraud detection, bot prevention, and protection against unauthorized access attempts.

6.2 Managing Cookies

You may control non-essential cookies through the cookie preference settings accessible on the pha777 Platform. You may also manage cookies through your browser settings; however, disabling certain cookies may impair functionality. Note that strictly necessary and security cookies cannot be disabled without preventing normal account access.

7. Data Security

pha777 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and pha777 servers.
• Encryption of sensitive data fields (including financial data and ID document copies) at rest using AES-256 encryption.
• Access controls and role-based permissions limiting internal staff access to personal data strictly on a need-to-know basis.
• Regular third-party penetration testing and security audits of our Platform infrastructure.
• Two-factor authentication (2FA) available to all players and mandatory for administrative accounts.
• Continuous intrusion detection and monitoring systems with automated alerting for anomalous access patterns.

8. Data Retention

pha777 retains personal data for no longer than is necessary to fulfill the purposes for which it was collected, subject to mandatory retention requirements imposed by Philippine law. Our general retention schedules are as follows:

• Account and Identity Data: Retained for the duration of your account and for five (5) years following account closure, as required by PAGCOR licensing and AMLA obligations.
• Transaction and Financial Records: Retained for five (5) years from the date of transaction in compliance with AMLA and BIR requirements.
• KYC Verification Documents: Retained for five (5) years from account closure or last transaction, whichever is later.
• Customer Support Communications: Retained for two (2) years from the date of resolution.
• Marketing Preference Records: Retained for the duration of your account plus one (1) year to document consent and opt-out history.
• Technical Logs and Usage Data: Retained for up to twelve (12) months for security and fraud prevention purposes, then purged or anonymized.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC-recommended data destruction standards.

9. Your Rights as a Data Subject

As a Filipino player and Data Subject under the Data Privacy Act of 2012, you have the following rights with respect to personal data held by pha777:

• Right to Be Informed: You have the right to be informed of how your personal data is collected, used, stored, and shared — which is the purpose of this Policy.
• Right of Access: You may request a copy of the personal data pha777 holds about you, including the categories of data, the purposes for processing, and any third parties with whom your data has been shared.
• Right to Rectification: You may request correction of inaccurate, incomplete, or outdated personal data. Many details can be updated directly from your account profile dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where consent has been withdrawn, or where processing is unlawful — subject to pha777's legal obligations to retain certain data.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time, and in certain circumstances, to other forms of processing based on legitimate interests.
• Right to Lodge a Complaint: If you believe pha777 has violated your data privacy rights, you may file a complaint directly with the National Privacy Commission of the Philippines at privacy.gov.ph.

To exercise any of the above rights, please contact the pha777 Data Protection Officer (DPO) via the support channels described in Section 12. We will respond to all verified data subject requests within thirty (30) days as required by the DPA. Requests may require identity verification before processing to protect against unauthorized data disclosure.

10. Children & Minors

pha777 services are strictly prohibited for individuals under the age of 21 years. We do not knowingly collect personal data from persons under 21 years of age. As part of our registration and KYC processes, pha777 verifies the age of all account holders before enabling access to real-money gaming services.

If pha777 discovers that personal data of a minor has been collected — whether through misrepresentation by the user or failure of a verification step — we will immediately suspend the associated account, delete the collected data where legally permissible, and return any deposited funds to the originating payment method after completing identity verification with the account holder or their legal guardian.

Parents and guardians are encouraged to monitor their children's internet usage and to contact pha777 support immediately if they believe a minor has accessed or registered on the Platform.

11. Changes to This Privacy Policy

pha777 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, regulatory requirements, or Platform services. When we make material changes, we will notify registered users via email or in-Platform notification at least seven (7) days prior to the changes taking effect.

The updated Policy will be published on this page with a revised "Last Updated" date. Your continued use of pha777 following the effective date of any changes constitutes your acceptance of the revised Policy. If you do not agree to the updated Policy, you should stop using the Platform and contact support to close your account.

We encourage you to periodically review this page to stay informed of how pha777 protects your personal data and to be aware of any changes that may affect you.

12. Contact Us

pha777 takes data privacy seriously and has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Policy. If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, you may reach our DPO and support team through the following channels:

• Email: [email protected] — please include "Privacy Request" in your subject line for faster routing.
• Live Chat: Available 24/7 directly from the pha777 Platform — accessible after logging in to your account.
• Response Time: We aim to acknowledge all privacy-related inquiries within 48 hours and to resolve them within 30 days, as required under the DPA.

For complaints or concerns not resolved to your satisfaction by pha777 directly, you may escalate your concern to the National Privacy Commission of the Philippines, the regulatory body responsible for enforcing the Data Privacy Act of 2012.